NefMoto

Hi everyone, Great forum, happy to be here. I am the new owner of a 2000 stage3/3+ S4.Previous owner was Mantis on here I believe.

On to the question.

I finally have my cable connecting to the ECU and am able to get ECU info and do all the VCDS lite and DTC things. I cannot however do a full read on the flash. I get Requestupload is not supported. I have attempted to contact Mantis and hopefully he will respond, in the meantime maybe some experienced tuners in here could give me some insight. Heres a log chunk to hopefully help.

19/May/2015 01:31:41.403: USER: Validating flash memory starts at 0x00800000 and ends at 0x00900000.
19/May/2015 01:31:41.404: LOG: Sent message with service ID RequestUpload
19/May/2015 01:31:41.421: LOG: Received message with service ID: NegativeResponse
19/May/2015 01:31:41.421: LOG: Received negative response for service ID: RequestUpload, with response code: ServiceNotSupported

Tuner probably disabled reading the flash.

Thanks for responding. It was Mantis who was the last one tuning the ECU. Are regular folks able to lock an ECU like that? Hopefully he responds soon to let me know. I opened the ECU and it looks stock, no aftermarket chip. thanks

Read it in boot mode if you must.

Starting over is better, he isnt a tuner.

Yes. Thanks for the ointer. Daz pointed me in that direction also. I'm currently trying to get into boot mode. The sticky says I can do it in car but it's better on the bench. I don't have a bench harness, so trying in cat with charger connected. Still getting no interface error. Any further noob suggestions? Thanks to all

I want to start from scratch but I would like to backup the current tune just in case.

Very very hard to get bootmode working in car unless you have an extra pair of hands..

Thanks for all the input. I managed to bodge together a bench setup and read the flash with galletto. The resulting file has no extension. do I need to do something to it now to load it in to tunerpro? Shouldnt it be a .bin?

thanks again to all.

Ok it seems to be loaded into tunerpro. but im totally green at this. Anyone willing to take a look at the file to see if its actually a good tune? the plan is to get this properly tuned when funds allow, but dont want to destroy the engine before that happens.

open any map. Look at it in 3d

Does it look like a map or nonsense?

Run the file through me7sum. Post the output!

Step #1: Reading ROM info ..
 Searching for EPK signature...OK
 Searching for ECUID table...OK
 EPK         : '40/1/ME7.1/5/6005.01//22m/DstC2o/011200//'
 Part Number : '8D0907551M  '
 Engine ID   : '2.7l V6/5VT     '
 SW Version  : '0002'
 HW Number   : '0261207143'
 SW Number   : '1037360857'

Step #2: Reading ROMSYS ..
 Startup section: word[0x008000]+word[0x00FFFE]
 @008038 Add=0x013225 CalcAdd=0x013225  ADD OK
 Program pages: 8k page first+last in 0x0000-0xFFFF and 0x20000-0xFFFFF
 @00803c Add=0xABDDC5 CalcAdd=0xABDDC5  ADD OK
 All param page: word[0x010000]+word[0x01FFFE]
 @01b9b0 Add=0x00971D CalcAdd=0x00971D  ADD OK

Step #3: Reading RSA signatures ..
 Searching for RSA offset #0...missing
 Searching for RSA offset #1...missing

Step #4: Finding CRC table(s) ..
 Searching for CRC table(s)...OK
 CRC table(s) OK

Step #5: Reading Main Data Checksums ..
 Searching for main data CRC pre block...missing
 Searching for main data CRC/csum blocks...OK
 Searching for main data CRC offsets...OK
 Searching for main data checksum offsets...missing
 Main CRCs:
 1) 0x010002-0x013FFE @7a866 CRC: CC8F21CE CalcCRC: CC8F21CE    CRC OK
 2) 0x014252-0x017F4E @7a86c CRC: 0B7E8B16 CalcCRC: 0B7E8B16    CRC OK
 3) 0x018192-0x01FBB0 @7a872 CRC: 76080FF5 CalcCRC: 76080FF5    CRC OK

Step #6: Reading Main Program Checksums ..
 Searching for main program checksum..OK
 ROM Checksum Block Offset Table @1e75a [16 bytes]:
 1) 0x000000-0x00FBFF CalcChk: 47AEFC2F
    0x00FC00-0x01FFFF CalcChk: 28F443B4 CalcCRC: FD1DEAAD SKIPPED
 2) 0x020000-0x0FFFFF
    <fffe0>  Chk: 9C94DFF7 CalcChk: 9C94DFF7 OK (i)

Step #7: Reading Multipoint Checksum Blocks ..
 Searching for multipoint block descriptor #1...OK
 1) <14224>  0x024000-0x02658D Chk: 0B08F804 CalcChk: 0B08F804 OK
 2) <14234>  0x014000-0x014243 Chk: 00540FE9 CalcChk: 00540FE9 OK (i)
 3) <14244>  0xFFFFFFFF-0xFFFFFFFF  END
 Multipoint #1: [2 blocks x <16> = 32 bytes]
 Searching for multipoint block descriptor #2...OK
 1) <1fbb2>  0x000000-0x003FFF Chk: 0FA0F5CF Boot: (whitelisted) OK
 2) <1fbc2>  0x004000-0x007FFF Chk: 0F4716B3 Boot: (whitelisted) OK
 3) <1fbd2>  0x000000-0x003FFF Chk: 0FF728A4 CalcChk: 0FF728A4 OK
 4) <1fbe2>  0x004000-0x007FFF Chk: 0F68CD6E CalcChk: 0F68CD6E OK
 Multipoint #2: [66 blocks x <16> = 1056 bytes]

*** Found 73 checksums in mantistune.bin

*** DONE! 0/0 error(s) in mantistune.bin corrected in mantisout.bin! ***

when I open maps in Tunerpro they seem to look legit. I also did a compare bin to stock 551m bin and it shows ~4000 bytes difference. I dont know how much change there should be for a stage 3 tune though. Some of the variables changed seem as though they would be towards performance changes for sure.

thanks to all of you for pointing me in the right direction. wouldnt have gotten to this point without the help. :)

Good work!

Since it isn't a commercial file and you did buy it, feel free to post it and we can look it over. If the car works I doubt its anything bad but I bet there is room for improvement, always is.

Yes it isnt a commercial file as far as I have been told. Mantis told me he downtuned it before he sold it to the owner i got it from. He said even without the meth injection it was extremely safe on 91 octane. I am hoping to get it back to its full potential in a safe tune. I am guessing the main way of dropping hp would of been pulling timing and boost?

Car specs for reference.
-stage 3 F21 turbos
-Siemens 60lb injectors
-JAW 90mm Maf/Intake, Hitachi conversion
-AWE intercoolers
-Devils Own methanol injection

Let me know what you guys see in the tune.

thanks

Some good, some bad, some weird.

Looks like KFMIOP is being used to limit it?

So if I understand you right, after looking at KFMIOP. He has lowered KFMIOP across the board. Wouldnt that act to postpone torque/timing intervention rather than bring it on sooner? From reading s4wiki thats how I perceived it.

I completely agree with snow trooper,  start over and make it your own.   

For the record,  the OP has misrepresented the car specs,  the intake is a gutted stock airbox,  the injectors or Bosch Ev 14 72lb

Thanks for chiming in Mantis. I was unaware they were 72lb injectors. Thanks

So I read through some threads about connecting my zeitronix to the Ecu so that I can log afr along with my other variables. I've tried some different things but can't seem to get it to show up in  logs. Could someone point me towards any threads that might help. I can't find the uushk variable so I'm assuming I have to add it, but can't find how. Right now I have the linear output wired to pin 68 on the Ecu which according go schematics and threads on the forums should be correct.

Ok guys im making small steps here, but still cant figure out how to open .ecu files to edit them. tried tunerpro, it crashes. tried hexeditor but it just doesnt look right. I know I need to add uushk_w to my files but cant. I have voltage at pin 68 which appears to be following gauge AFR so that should be good. Anyone care to throw me a bone, or a hint?

really want to start logging so I can start tuning.

thanks everyone

Notepad!

:P

I know I tried that. must have been too tired to focus on it right. Thanks ddillenger!

So I tried logging and it doesnt seem to be working. I get solid unchanging AFR reading of 10.5. I also noticed that I am getting fluctuating readings on USVK2. shouldnt that be 0 if my rear O2's aren't connected anymore?

Green connector? 0x381116.
Brown connector? 0x381114

Connectors appear to be gone. I am wired direct into pin 68 on Ecu. Uushk_w 0x381116

I'm thinking I should review how the rear O2's delete was done.

pin 69 is 0x381116.

Ok I was going from this thread.

http://nefariousmotorsports.com/forum/index.php?PHPSESSID=ag9u80b78iscvv6n7nhhjdcu31&topic=3731.0

I will try to verify what my pin 68 is. its a green wire and should be sens1 bank2 judging by that thread.

I inserted this into my files.

Edited ME7L ecu file and added the following line:
;Name,    {Alias},                        Address,  Size, Bitmask, {Unit},        S, I,            A,     B, Comment
uushk_w, {O2SVoltageSensorWB}, 0x381116,    2,  0x0000, {WB-AFR} , 0, 0, 0.009766, -9.6, {}
 
Edited ME7L cfg file and added the following line:
;Name      [Alias]                     
uushk_w   AFR-WideBand

thanks ddillenger

No worries bud. I have done this every way it is doable-lol. If you have issues, let me know.

Well looks like I will need to repopulate pin 69. Rear O2's look to be completely removed from the harness.

Can anyone verify this combined with connecting to pin 69 will work?

Huge thanks to @ddillengerfor keeping me on the right track. took some time away from wiring to respray the front end. After coming back to the harness with fresh eyes I saw my error. One pin out. Doh! Had to disassemble the connector to see all the pins to count.

Now I can log once the font ends together again! :)